Fixed sanitizing for simple attacks, attacks that use invalid html with $oldViewValue, and attacks that were uploaded to the server and served to others